CVE-2004-0057: Medium severity Lbl Tcpdump vulnerability
The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0057?
CVE-2004-0057 has been classified as a moderate severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2004-0057?
To fix CVE-2004-0057, upgrade tcpdump to version 3.8.2 or later, which includes a patch addressing this issue.
What systems are affected by CVE-2004-0057?
CVE-2004-0057 affects tcpdump versions up to and including 3.8.1.
What type of attack does CVE-2004-0057 facilitate?
CVE-2004-0057 allows remote attackers to exploit malformed ISAKMP packets to trigger a segmentation fault in tcpdump.
Is CVE-2004-0057 still relevant today?
While CVE-2004-0057 is an older vulnerability, systems running outdated versions of tcpdump may still be at risk if not updated.